[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNQ-rvtBICKL48qTxqNaBsFtmsMStyncpbNHrahQWBDs":3,"g5a-ex:horde\u002Fgroupware@*":339,"g5a-family:horde\u002Fgroupware":341},{"success":4,"data":5},true,{"product":6,"versions":177,"topVulnerabilitiesByEpss":254,"kevVulnerabilities":316,"seoMetadata":317,"meta":336},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":176},"horde","groupware",76,45,0,"2022-07-28",[14,18,21,23,26,29,31,33,35,37,40,42,45,47,49,51,53,55,57,59,61,63,65,67,70,72,74,76,78,80,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,152,154,156,158,160,162,164,166,168,170,172,174],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.0",8,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"1.0.1",7,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"1.0.2",{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"1.0.3",6,{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},"1.0.4",5,{"version":30,"cve_count":25,"kev_count":11,"has_kev":17},"1.0.5",{"version":32,"cve_count":28,"kev_count":11,"has_kev":17},"1.0.6",{"version":34,"cve_count":28,"kev_count":11,"has_kev":17},"1.0.7",{"version":36,"cve_count":28,"kev_count":11,"has_kev":17},"1.0.8",{"version":38,"cve_count":39,"kev_count":11,"has_kev":17},"1.0_rc2",1,{"version":41,"cve_count":39,"kev_count":11,"has_kev":17},"1.0_rc3",{"version":43,"cve_count":44,"kev_count":11,"has_kev":17},"1.1",9,{"version":46,"cve_count":20,"kev_count":11,"has_kev":17},"1.1.1",{"version":48,"cve_count":20,"kev_count":11,"has_kev":17},"1.1.2",{"version":50,"cve_count":20,"kev_count":11,"has_kev":17},"1.1.3",{"version":52,"cve_count":20,"kev_count":11,"has_kev":17},"1.1.4",{"version":54,"cve_count":25,"kev_count":11,"has_kev":17},"1.1.5",{"version":56,"cve_count":25,"kev_count":11,"has_kev":17},"1.1.6",{"version":58,"cve_count":20,"kev_count":11,"has_kev":17},"1.2",{"version":60,"cve_count":20,"kev_count":11,"has_kev":17},"1.2.1",{"version":62,"cve_count":39,"kev_count":11,"has_kev":17},"1.2.10",{"version":64,"cve_count":20,"kev_count":11,"has_kev":17},"1.2.2",{"version":66,"cve_count":20,"kev_count":11,"has_kev":17},"1.2.3",{"version":68,"cve_count":69,"kev_count":11,"has_kev":17},"1.2.4",3,{"version":71,"cve_count":69,"kev_count":11,"has_kev":17},"1.2.5",{"version":73,"cve_count":11,"kev_count":11,"has_kev":17},"1.2.6",{"version":75,"cve_count":11,"kev_count":11,"has_kev":17},"1.2.7",{"version":77,"cve_count":11,"kev_count":11,"has_kev":17},"1.2.8",{"version":79,"cve_count":11,"kev_count":11,"has_kev":17},"1.2.9",{"version":81,"cve_count":82,"kev_count":11,"has_kev":17},"4.0",4,{"version":84,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.0",{"version":86,"cve_count":82,"kev_count":11,"has_kev":17},"4.0.1",{"version":88,"cve_count":82,"kev_count":11,"has_kev":17},"4.0.2",{"version":90,"cve_count":82,"kev_count":11,"has_kev":17},"4.0.3",{"version":92,"cve_count":82,"kev_count":11,"has_kev":17},"4.0.4",{"version":94,"cve_count":82,"kev_count":11,"has_kev":17},"4.0.5",{"version":96,"cve_count":82,"kev_count":11,"has_kev":17},"4.0.6",{"version":98,"cve_count":69,"kev_count":11,"has_kev":17},"4.0.7",{"version":100,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.8",{"version":102,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.9",{"version":104,"cve_count":69,"kev_count":11,"has_kev":17},"5.0.0",{"version":106,"cve_count":69,"kev_count":11,"has_kev":17},"5.0.1",{"version":108,"cve_count":69,"kev_count":11,"has_kev":17},"5.0.2",{"version":110,"cve_count":69,"kev_count":11,"has_kev":17},"5.0.3",{"version":112,"cve_count":69,"kev_count":11,"has_kev":17},"5.0.4",{"version":114,"cve_count":69,"kev_count":11,"has_kev":17},"5.0.5",{"version":116,"cve_count":69,"kev_count":11,"has_kev":17},"5.1.0",{"version":118,"cve_count":69,"kev_count":11,"has_kev":17},"5.1.1",{"version":120,"cve_count":28,"kev_count":11,"has_kev":17},"5.1.2",{"version":122,"cve_count":69,"kev_count":11,"has_kev":17},"5.1.3",{"version":124,"cve_count":39,"kev_count":11,"has_kev":17},"5.1.4",{"version":126,"cve_count":39,"kev_count":11,"has_kev":17},"5.1.5",{"version":128,"cve_count":39,"kev_count":11,"has_kev":17},"5.2.0",{"version":130,"cve_count":39,"kev_count":11,"has_kev":17},"5.2.1",{"version":132,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.10",{"version":134,"cve_count":39,"kev_count":11,"has_kev":17},"5.2.11",{"version":136,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.12",{"version":138,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.13",{"version":140,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.14",{"version":142,"cve_count":39,"kev_count":11,"has_kev":17},"5.2.15",{"version":144,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.16",{"version":146,"cve_count":39,"kev_count":11,"has_kev":17},"5.2.17",{"version":148,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.18",{"version":150,"cve_count":151,"kev_count":11,"has_kev":17},"5.2.19",2,{"version":153,"cve_count":39,"kev_count":11,"has_kev":17},"5.2.2",{"version":155,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.20",{"version":157,"cve_count":151,"kev_count":11,"has_kev":17},"5.2.21",{"version":159,"cve_count":28,"kev_count":11,"has_kev":17},"5.2.22",{"version":161,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.23",{"version":163,"cve_count":39,"kev_count":11,"has_kev":17},"5.2.3",{"version":165,"cve_count":39,"kev_count":11,"has_kev":17},"5.2.4",{"version":167,"cve_count":39,"kev_count":11,"has_kev":17},"5.2.5",{"version":169,"cve_count":39,"kev_count":11,"has_kev":17},"5.2.6",{"version":171,"cve_count":39,"kev_count":11,"has_kev":17},"5.2.7",{"version":173,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.8",{"version":175,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.9","Groupware by Horde is a technology product with 76 tracked versions and 45 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},{"version":30,"cve_count":25,"kev_count":11,"has_kev":17},{"version":32,"cve_count":28,"kev_count":11,"has_kev":17},{"version":34,"cve_count":28,"kev_count":11,"has_kev":17},{"version":36,"cve_count":28,"kev_count":11,"has_kev":17},{"version":38,"cve_count":39,"kev_count":11,"has_kev":17},{"version":41,"cve_count":39,"kev_count":11,"has_kev":17},{"version":43,"cve_count":44,"kev_count":11,"has_kev":17},{"version":46,"cve_count":20,"kev_count":11,"has_kev":17},{"version":48,"cve_count":20,"kev_count":11,"has_kev":17},{"version":50,"cve_count":20,"kev_count":11,"has_kev":17},{"version":52,"cve_count":20,"kev_count":11,"has_kev":17},{"version":54,"cve_count":25,"kev_count":11,"has_kev":17},{"version":56,"cve_count":25,"kev_count":11,"has_kev":17},{"version":58,"cve_count":20,"kev_count":11,"has_kev":17},{"version":60,"cve_count":20,"kev_count":11,"has_kev":17},{"version":62,"cve_count":39,"kev_count":11,"has_kev":17},{"version":64,"cve_count":20,"kev_count":11,"has_kev":17},{"version":66,"cve_count":20,"kev_count":11,"has_kev":17},{"version":68,"cve_count":69,"kev_count":11,"has_kev":17},{"version":71,"cve_count":69,"kev_count":11,"has_kev":17},{"version":73,"cve_count":11,"kev_count":11,"has_kev":17},{"version":75,"cve_count":11,"kev_count":11,"has_kev":17},{"version":77,"cve_count":11,"kev_count":11,"has_kev":17},{"version":79,"cve_count":11,"kev_count":11,"has_kev":17},{"version":81,"cve_count":82,"kev_count":11,"has_kev":17},{"version":84,"cve_count":11,"kev_count":11,"has_kev":17},{"version":86,"cve_count":82,"kev_count":11,"has_kev":17},{"version":88,"cve_count":82,"kev_count":11,"has_kev":17},{"version":90,"cve_count":82,"kev_count":11,"has_kev":17},{"version":92,"cve_count":82,"kev_count":11,"has_kev":17},{"version":94,"cve_count":82,"kev_count":11,"has_kev":17},{"version":96,"cve_count":82,"kev_count":11,"has_kev":17},{"version":98,"cve_count":69,"kev_count":11,"has_kev":17},{"version":100,"cve_count":11,"kev_count":11,"has_kev":17},{"version":102,"cve_count":11,"kev_count":11,"has_kev":17},{"version":104,"cve_count":69,"kev_count":11,"has_kev":17},{"version":106,"cve_count":69,"kev_count":11,"has_kev":17},{"version":108,"cve_count":69,"kev_count":11,"has_kev":17},{"version":110,"cve_count":69,"kev_count":11,"has_kev":17},{"version":112,"cve_count":69,"kev_count":11,"has_kev":17},{"version":114,"cve_count":69,"kev_count":11,"has_kev":17},{"version":116,"cve_count":69,"kev_count":11,"has_kev":17},{"version":118,"cve_count":69,"kev_count":11,"has_kev":17},{"version":120,"cve_count":28,"kev_count":11,"has_kev":17},{"version":122,"cve_count":69,"kev_count":11,"has_kev":17},{"version":124,"cve_count":39,"kev_count":11,"has_kev":17},{"version":126,"cve_count":39,"kev_count":11,"has_kev":17},{"version":128,"cve_count":39,"kev_count":11,"has_kev":17},{"version":130,"cve_count":39,"kev_count":11,"has_kev":17},{"version":132,"cve_count":11,"kev_count":11,"has_kev":17},{"version":134,"cve_count":39,"kev_count":11,"has_kev":17},{"version":136,"cve_count":11,"kev_count":11,"has_kev":17},{"version":138,"cve_count":11,"kev_count":11,"has_kev":17},{"version":140,"cve_count":11,"kev_count":11,"has_kev":17},{"version":142,"cve_count":39,"kev_count":11,"has_kev":17},{"version":144,"cve_count":11,"kev_count":11,"has_kev":17},{"version":146,"cve_count":39,"kev_count":11,"has_kev":17},{"version":148,"cve_count":11,"kev_count":11,"has_kev":17},{"version":150,"cve_count":151,"kev_count":11,"has_kev":17},{"version":153,"cve_count":39,"kev_count":11,"has_kev":17},{"version":155,"cve_count":11,"kev_count":11,"has_kev":17},{"version":157,"cve_count":151,"kev_count":11,"has_kev":17},{"version":159,"cve_count":28,"kev_count":11,"has_kev":17},{"version":161,"cve_count":11,"kev_count":11,"has_kev":17},{"version":163,"cve_count":39,"kev_count":11,"has_kev":17},{"version":165,"cve_count":39,"kev_count":11,"has_kev":17},{"version":167,"cve_count":39,"kev_count":11,"has_kev":17},{"version":169,"cve_count":39,"kev_count":11,"has_kev":17},{"version":171,"cve_count":39,"kev_count":11,"has_kev":17},{"version":173,"cve_count":11,"kev_count":11,"has_kev":17},{"version":175,"cve_count":11,"kev_count":11,"has_kev":17},[255,263,271,275,282,287,294,299,304,310],{"cveId":256,"description":257,"publishedDate":258,"cvssScore":259,"cvssVersion":260,"severity":261,"isKev":17,"epssScore":262},"CVE-2012-0209","Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced modification (Trojan Horse) in templates\u002Fjavascript\u002Fopen_calendar.js, which allows remote attackers to execute arbitrary PHP code.","2012-09-25",7.5,"v2","High",0.71897,{"cveId":264,"description":265,"publishedDate":266,"cvssScore":267,"cvssVersion":268,"severity":269,"isKev":17,"epssScore":270},"CVE-2020-8518","Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.","2020-02-17",9.8,"v3.1","Critical",0.71728,{"cveId":272,"description":273,"publishedDate":12,"cvssScore":16,"cvssVersion":268,"severity":261,"isKev":17,"epssScore":274},"CVE-2022-30287","Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class. This then leads to arbitrary deserialization of PHP objects.",0.69413,{"cveId":276,"description":277,"publishedDate":278,"cvssScore":279,"cvssVersion":280,"severity":261,"isKev":17,"epssScore":281},"CVE-2017-7413","In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an authenticated Horde Webmail user, has PGP features enabled in their preferences, and attempts to encrypt an email addressed to a maliciously crafted email address.","2017-04-04",8.8,"v3.0",0.39184,{"cveId":283,"description":284,"publishedDate":285,"cvssScore":279,"cvssVersion":268,"severity":261,"isKev":17,"epssScore":286},"CVE-2019-9858","Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde\u002FForm\u002FType.php contains a vulnerable class that handles image upload in forms. When the Horde_Form_Type_image method onSubmit() is called on uploads, it invokes the functions getImage() and _getUpload(), which uses unsanitized user input as a path to save the image. The unsanitized POST parameter object[photo][img][file] is saved in the $upload[img][file] PHP variable, allowing an attacker to manipulate the $tmp_file passed to move_uploaded_file() to save the uploaded file. By setting the parameter to (for example) ..\u002Fusr\u002Fshare\u002Fhorde\u002Fstatic\u002Fbd.php, one can write a PHP backdoor inside the web root. The static\u002F destination folder is a good candidate to drop the backdoor because it is always writable in Horde installations. (The unsanitized POST parameter went probably unnoticed because it's never submitted by the forms, which default to securely using a random path.)","2019-05-29",0.18834,{"cveId":288,"description":289,"publishedDate":290,"cvssScore":291,"cvssVersion":268,"severity":292,"isKev":17,"epssScore":293},"CVE-2020-8866","This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmail Edition 5.2.22. Authentication is required to exploit this vulnerability. The specific flaw exists within add.php. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the www-data user. Was ZDI-CAN-10125.","2020-03-23",6.5,"Medium",0.09579,{"cveId":295,"description":296,"publishedDate":290,"cvssScore":297,"cvssVersion":268,"severity":292,"isKev":17,"epssScore":298},"CVE-2020-8865","This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webmail Edition 5.2.22. Authentication is required to exploit this vulnerability. The specific flaw exists within edit.php. When parsing the params[template] parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the www-data user. Was ZDI-CAN-10469.",6.3,0.06808,{"cveId":300,"description":301,"publishedDate":302,"cvssScore":259,"cvssVersion":280,"severity":261,"isKev":17,"epssScore":303},"CVE-2017-15235","The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that corresponds to the exact filename.","2017-10-11",0.0553,{"cveId":305,"description":306,"publishedDate":307,"cvssScore":308,"cvssVersion":260,"severity":292,"isKev":17,"epssScore":309},"CVE-2010-3695","Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related to the Fetchmail configuration.","2011-03-31",4.3,0.04979,{"cveId":311,"description":312,"publishedDate":313,"cvssScore":314,"cvssVersion":268,"severity":292,"isKev":17,"epssScore":315},"CVE-2021-26929","An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke use of \\x00\\x00\\x00 and \\x01\\x01\\x01 interferes with XSS defenses.","2021-02-14",6.1,0.04944,[],{"title":318,"metaDescription":319,"keywords":320,"structuredData":321},"Groupware by Horde - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Groupware by Horde covering 76 versions with 45 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Groupware vulnerabilities, Groupware security, Groupware CVE, Horde Groupware, Groupware threat intelligence, Horde security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":322,"@type":323,"name":324,"description":319,"url":325,"manufacturer":326,"applicationCategory":330,"softwareVersion":331,"mainEntity":332},"https:\u002F\u002Fschema.org","SoftwareApplication","Groupware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fhorde\u002Fgroupware",{"@type":327,"name":328,"url":329},"Organization","Horde","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fhorde","Security Software","76 versions tracked",{"@type":333,"name":334,"description":335,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Groupware Security Vulnerabilities","Security vulnerabilities affecting Groupware by Horde",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":337,"apiVersion":338},"2026-10-17T00:04:31.222Z","3.0",{"rows":340,"total":11,"capped":17,"failed":11},[],[342],{"product":343,"cves":344},"groupware_webmail_edition",10]